https://web.dev/trusted-types/ https://microsoftedge.github.io/edgevr/posts/eliminating-xss-with-trusted-types/ https://github.com/w3c/webappsec-trusted-types/issues/342
